GCVE-110-OSM-2026-3337

Bug bounty dependency confusion attempt. Package exfiltrates basic system information (hostname, IP, DNS) to security research infrastructure. Behaviors: data exfiltration, install-time execution. Key findings: - OAST/Interactsh Exfiltration in package.json: ".oast.pro" - System Information Exfiltration in package.json: "os.hostname(), platform: os.platform() }); const req = http.request({ hostname: ..." - HTTP Data Exfiltration in package.json: "os.hostname(), platform: os.platform() }); const req = http.request" - Data Encoding for Exfiltration in package.json: "encodeURIComponent(data), method: 'GET' }); req.end" - Platform Detection with Data Collection in package.json: "JSON.stringify({ name: 'coinmate-poc', hostname: os.hostname(), platform: os.pla..." IOCs: - urls: https://bford.info/cachedir/ - domains: d7oqinq9io6l3kt2u62gqfe5mchktmcye.oast.pro - binaryHashes: daddd6dacfe80375ede98d87be7924f8b4788826836cd40b141b7c4e8e2b824a, 4c345d024892cd260259cd6298c84fb085219dae5ea7d19fd11e0cb13bcfa0f7, 444c22e1a57163b5a1d1b4cf04f5a22ccc6aa3435365ae0fced2add796b253af